View Issue Details

IDProjectCategoryView StatusLast Update
14350Bug reports[All Projects] _ Unknownpublic2018-12-18 15:07
ReporterKeisial Assigned Tomarkusfluer  
Status assignedResolutionopen 
Product Version3.15.x 
Target VersionFixed in Version 
Summary14350: Beginner tour tries to use http url

I have LimeSurvey 3.15.5 installed on a HTTP server with HTTPS provided by a proxy server in front of the application server.

Navigation works fine, keeping the user in https.

However, clicking on the Beginner tour from the top menu, it tries to load http://mydomain/admin/tutorial/sa/servertutorial with http:// url. Which breaks due to the Content-security-policy I had established on that domain.
After the error of the blocked loading, the console simply shows that there was an "Unhandled promise rejection".
On production mode, it points to adminbasics.min.js:1:143803, which isn't that useful. On development mode it points to adminbasics.js:24015:11 Still, it is only the where it found the promise to have failed, not where the XHR url was set :/

I am providing a Forwarded-Proto: https header so that the php side is aware of the https, but it makes no difference.

I can test some changes you may need, but right now I have no idea how to start debugging this.

TagsNo tags attached.
Complete LimeSurvey version number (& build)3.15.5
I will donate to the project if issue is resolvedNo
Database & DB-VersionMariadb 10.1.37-0+deb9u1
Server OS (if known)Debian stretch
Webserver software & version (if known)Apache2 2.4.25-3+deb9u6
PHP Version7.0.30-0+deb9u1


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2018-12-17 00:28 Keisial New Issue
2018-12-18 15:07 ollehar Assigned To => markusfluer
2018-12-18 15:07 ollehar Status new => assigned